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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH (S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

• If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)D Responsive to communication(s) filed on . 

2a)(3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1 and 3-8 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^ Claimfe) 1. 3-8 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Final Action 

Claim Rejections - 35 USC § 112 

1. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter, which the applicant regards as his invention. 

2. Claims 1, 3-8 are rejected under 1 12 2 nd for new matter. Claims 1, 3-8, are rejected under 
1 12 2 nd , for the limitation, "without requiring that the service web server verify the first set of 
credentials". This limitation is not disclosed in the specification. In the specification, there is 
disclosed a first permission is maintained at the web server(see specification, pg. 2). A second 
user is provided access to the first permission upon the second user authenticating to the web 
server(pg. 2 of spec). The fist permission includes a label related to the service and digital 
signature of a first user(pg. 2 of spec). The second user is provided a permission that includes 
the first permission and the digital signature of the web server(pg. 2 of spec). A request to access 
the service is received at the web server from the second user as well as the permission (pg. 2 of 
spec). The first permission of the first user is verified by the web server(see specification, pg. 2). 
According to the specification, the web server verifies the first set of credentials (see pg. 2, pg. 5- 
6, 17), and thus is rejected under 1 12 2 nd for new matter, because the limitation, "without 
requiring that the service web server verify the first set of credentials", is not described in the 
specification. 

Claim Rejections - 35 USC §102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
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A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 35 1(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 2 1 (2) of such treaty in the English language. 

4. Claims 1, 3-8 remain rejected under 35 U.S.C. 102(e) as being anticipated by Fox et al. 

5. As per claims 1, 4-5, 8, Fox et al. discloses a method of providing secure access to a 
service on a service web server(see col. 2, lines 10-18, 26-28) including, maintaining at a 
permission web server a first permission (see col. 6, lines 53-62), wherein the first permission 
includes a label related to the service and a digital signature of a first user(see col. 2, lines 25- 
43); providing access to the first permission to a second user upon the second user authenticating 
to the permission web server(see col. 7, lines 37-67, col. 8, lines 1-13); providing the second user 
a permission including the first permission and a permission link including the label and a digital 
signature of the permission web server using a first set of credential s(see col 7, lines 37-67, col. 
8, lines 1-13); receiving at the service web server from the second user a request to access the 
service; receiving the permission from the second user at the service web server(see col. 13, lines 
44-67, col. 14, lines 1-20); verifying the digital signature of the permission web server and the 
digital signature of the first user in the permission at the service web server; and providing the 
second user access to the service if step(f) produces a positive result(see col. 10, lines 55-67). 

6. As per claim 3, Fox et al. discloses wherein the label including a URL for identifying the 
service (see col. 2, lines 10-25). 

7. As per claim 6, Fox et al. discloses wherein the subsequent permission is delegated to the 
subsequent user via electronic mail(see col. 15, lines 34-41). 
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8. As per claim 7, Fox et al. discloses wherein the subsequent permission is delegated to the 
subsequent user by a subsequent web server(see col. 13, lines 44-67, col. 14, lines 1-20). 

Response to Amendment 

9. The Applicant states Fox does not teach a method of acquiring access to a resource 
without prior registration. The specification does not disclose acquiring access to a resource 
without prior registration. The Applicant discloses that there is a first user and a second user. 
The first user requests from the key server the public key of a second user(see pg. 5-6 of 
specification). The key server provides the key to the first user at client issuer(see pg. 5-6 of 
specification). The first user creates a second permission link, including the label, at client 
issuer(see pg. 5-6 of specification). The first user sends permission to the second user(see pg. 5- 
6 of specification). The second user authenticates to the application server using his private 
key(see pg. 5-6 of specification). The server verifies the information contained in the 
permission(see pg. 5-6 of specification). The second user in the specification is registered 
before, access to the resource, because the server has the credentials stored in order to validate 
the second user(see pg. 5-6 of specification). 

10. The Applicant states that the Fox art that was used to reject claims, does not disclose a 
first user verifying the credentials used by the second user before creating the permission on the 
permission server that will be used by the second user to gain access to the service web server. 
The Applicant's remarks are neither disclosed in the claims nor specification. Thus, the 
Applicant's remarks are moot. 
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Final Action 

11. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jenise E Jackson whose telephone number is (571) 272-3791. 
The examiner can normally be reached on M-Th (6:00 a.m. - 3:30 p.m.) alternate Friday's. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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